FTC releases facial recognition tech guidelines

FTC releases facial recognition tech guidelines

Summary: How far should companies be able to utilize facial recognition technology?

TOPICS: Legal, Government US

The U.S. Federal Trade Commission has released "best practices" guidelines for companies that use facial recognition technology.

ftc facial recognition technology guidelines report

For many of us, tagging friends on Facebook or handing over biometric information may not seem like such a big deal -- but that information, stored on servers worldwide, can sometimes border on privacy infringement. Commercially, it's no longer a rare thing for such technology to be used -- but as adoption expands, if agencies wish to protect consumer rights, guidelines at the least should be implemented.

The new FTC report, titled "Facing Facts: Best Practices for Common Uses of Facial Recognition Technologies," is aimed at guiding businesses through the murky waters of using facial recognition for innovative products, but at the same time maintaining consumer privacy and rights.

The FTC notes (emphasis mine):

"[The report is] intended to provide guidance to commercial entities that are using or plan to use facial recognition technologies in their products and services. However, to the extent the recommended best practices go beyond existing legal requirements, they are not intended to serve as a template for law enforcement actions or regulations under laws currently enforced by the FTC."

The Commission's recommendations include:

  • Companies should design their services with consumer privacy in mind;
  • They should develop "reasonable security protections" for data collection, and maintain sound methods over what information to keep, and what to discard;
  • The sensitive nature of information should be considered -- as an example, using facial recognition technology near children, changing rooms or toilets isn't advisable;
  • Finally, consumers should be well-informed when facial recognition technology is being used, and they should control what data is collected.

Where social media comes into play, the FTC report suggests that any network which uses facial recognition technology -- such as Facebook's tagging feature -- should provide users with clear guidelines stating how the service works, what data is collected, and how the information will be used in the future.

Going further, the Commission wants consumers to have the option to turn off gesture recognition technology features and delete any previously collected information permanently.

There are two cases where the FTC believes that companies should get a "consumer's affirmative consent" before collecting any kind of biometric data based on facial images. First, when identifying anonymous individuals to third parties that wouldn’t otherwise know who they were, and second, when using any data for purposes outside of what was initially represented.

Social networks, digital signs and mobile apps often use facial recognition technology. However, due to advances over the last decade, it has also been used to predict consumer behavior patterns in retail stores, to see if customers are engaged by detecting emotional changes, and identifying anonymous parties wherever surveillance cameras exist.

Consider Chicago-based startup Scenetap. The firm has combined "anonymous" facial recognition technology in venues with mobile technology so socialites can choose where next to go on a Friday based on their preferences -- from male-to-female ratio, current capacity, "scene" and the average age of customers. This information is all provided through cameras in different venues, but you have to wonder how many customers are aware they are being profiled.

This kind of data may also be susceptible to cyberattacks or security breaches, and this has to be kept in mind when technological advances are made.

According to the FTC, if companies choose to consider the issues of privacy, choice and transparency in the fledgling stage of facial recognition technology, it will help ensure that the industry develops in a positive way -- namely, innovative product and service development that also respects consumer privacy as much as possible.

Topics: Legal, Government US

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • It's not companies I'm worried about, it's the government.

    It's not a company that will use it to make money I'm worried about, it's what the government is going to do with it.

    We aren't but 5 years away from a government where they send you to jail for jaywalking, pot smoking, drinking too large a soda.....each and every time you do it, because they really can watch everyone, all the time.

    They are already talking about predictive policing, where just because you 'may' commit a crime that day, they preventitivly detain you.
    Xira Arien
    • That's a bit skewed.

      "They are already talking about predictive policing, where just because you 'may' commit a crime that day, they preventitivly detain you."

      If someone admits they are about to commit a crime or there is overwhelming evidence they are about to commit a crime, then they can be detained for preventative measures. And i'm not absolutely sure but i think there even needs to be some sort of warrant issued. However, authorities can't just detain someone because they had a gut feeling. That is indeed constitutionally illegal and i don't think that will ever change.
  • Don't smile

    Remember, don't smile for your driver's license. It might incoveience the state's facial recognition software. (I saw this tidbit in the newspaper the other day.)